CVE-2026-70214

A vulnerability in Microsoft Office Excel allows an unauthorized attacker to perform an out-of-bounds read , which can result in the disclosure of sensitive information locally. The issue has a CVSS v3.1 score of 5.5 (Medium) . Microsoft has released official updates to address this vulnerability...

CVE-2026-69919

An out-of-bounds read vulnerability exists in Windows Cryptographic Services . This flaw allows an authorized attacker to perform a local attack to disclose information . The vulnerability is associated with CWE-125 . No specific exploit details or remediation instructions are provided in the doc...

CVE-2026-88093

A Heap-based buffer overflow exists in the Desktop Window Manager , which allows an authorized attacker to perform a local privilege escalation . The vulnerability has a High severity rating (CVSS 3.1 score of 7.8) and involves a LOW attack complexity. No specific exploit information or patch ver...

EUVD-2026-100144

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-87695

A vulnerability in Microsoft Exchange Server involves the inclusion of functionality from an untrusted control sphere, which allows an authorized attacker to achieve local privilege escalation . The vulnerability has a base score of 7.8 (High) . Microsoft has released updates to address this issu...

EUVD-2026-100143

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-100136

Improper link resolution before file access 'link following' in Microsoft Defender allows an authorized attacker to disclose information locally...

CVE-2026-70160

A Use after free vulnerability in the Windows Kernel allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.0 . No specific component, version, or remediation details are provided in the documents, and ...

CVE-2026-70261

The Microsoft Trace Data Helper component is affected by a vulnerability that allows an authorized attacker to disclose sensitive system information locally. This issue is categorized as CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere). The vulnerability has a ...

CVE-2026-70184

The Windows Backup Engine is vulnerable to an Improper Resolution of Path Equivalence (CWE-41) vulnerability. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a HIGH base severity score of 7.8. While the impact involves high confidentiality, int...

CVE-2026-70228

An out-of-bounds read vulnerability exists in the Desktop Window Manager component. This flaw allows an authorized attacker to perform a local privilege escalation . Exploitation details and specific affected versions are not provided in the documents. Remediation information is not explicitly de...

CVE-2026-70227

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially revealing sensitive data. No specific exploit code or in-the-wild exploitation details are provided in the document...

CVE-2026-70260

The Microsoft Trace Data Helper component is vulnerable to an information disclosure flaw (CWE-497) that allows an authorized attacker to disclose sensitive system information locally. The vulnerability results from exposure to an unauthorized control sphere. The CVSS 3.1 score is 5.5 (Medium) , ...

CVE-2026-70143

A heap-based buffer overflow exists in the Windows Network File System , which may allow an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-122 and carries a High base severity score of 7.8. No specific exploit details or remediation steps are provid...

CVE-2026-69915

A Use after free vulnerability in Windows NTFS allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and carries a High severity base score of 7.0. Technical details regarding specific impacted components or files are not provided in t...

CVE-2026-70054

A heap-based buffer overflow exists in Windows NetBIOS that allows an authorized attacker to achieve local privilege escalation . The vulnerability results in high impacts on confidentiality, integrity, and availability. An official fix is available, and no specific exploit code or in-the-wild ex...

CVE-2026-70084

An improper access control vulnerability exists in the Windows Projected File System . This flaw allows an authorized attacker to perform a local information disclosure . The root cause is categorized under CWE-22 (Path Traversal). No specific details regarding affected versions, exploit code, or...

CVE-2026-70122

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Broadcast DVR User Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . The vulnerability is tracked under CWE-367 . Remediation is available via an official fix provided by Mic...

CVE-2026-70148

The Windows Broadcast DVR User Service is susceptible to an improper authorization vulnerability (CWE-441). This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 base score of 6.5 and is categorized as a MEDIUM severity issue. No spec...

CVE-2026-70112

A heap-based buffer overflow vulnerability exists in the Windows Spaceport.sys component. This flaw allows an authorized attacker to achieve local code execution . The vulnerability is characterized by high impacts on confidentiality, integrity, and availability, with a CVSS 3.1 base score of 7.8...